thanks for the tips, user32.dll has a cert in SPP shell32-license-ppdlic.xrm-ms if I take ownership of a file in system32 and then try to rename it with expolere.exe I get a UAC prompt unknown file operation by unknown application, set UAC to the default setting. tested on 2 computers one had only the nag patch for control-panel applied to shell32.dll if you open mspaint and look for NtQueryLicenseValue you'll see the code that I normaly see for the nag patches.
absolutly, this is just an experiment I wanna see how long Windows 7 will run with the key removed and all the nags patched. I have the machine set up as a file server now.
guys i run it on my virtual machine windows 7 fresh installed and it still says 30 days to activate,is it normal?
I tried this on a vm(Windows 7 Ultimate) and it so far(4 days) has worked perfectly. I have gotten all updates from Windows via the automatic update. When I go to "system" there is no place at the bottom(where it usually says "genuine" or "x days to activate". It's just blank.
There were only these commands on the app: Remove WAT Restore WAT I only clicked the 1st one. Now when if I run the exe, the "remove wat" is greyed out and there is only "remove WAT". I'm happy with this app. So far, so good.
Why don't you use this as your back up plan. Leave your machine activated, but if it ever gets un-activated, then run this. It would be utterly pointless to run this on an already activated machine. Smart move is to wait until the first activation is disabled. Does that make sense.
found photoviewer infected with the naggs 32 Comparing files orig_PhotoViewer.dll and MOD_PHOTOVIEWER.DLL 00025B64: 0F E9 00025B65: 8C 6B 00025B66: 6A 0D 00025B67: 0D 00 so far my file server is doing fine with the naggs patched, slui.exe renamed and the key removed slmgr -upk no unexpected behavior.
PhotoViewer.dll no nag patch for 64bit Comparing files orig_PhotoViewer.dll and MOD_PHOTOVIEWER.DLL 0002534E: 0F E9 0002534F: 8C AB 00025350: AA 13 00025351: 13 00
maybe it's time to go opensource & free I mean, If this apps are the time bomb of Windows 7 nags: notepad , wordpad, calculator, control panel. It's time to get alternatives and replace the handles to use instead of: notepad -> notepad++ wordpad -> OpenOffice or a cousin calculator -> jac-c*lc, Mini Calcul*t*r control panel -> well, maybe exists an alternative ** Of course we need to dissable access to this apps. And maybe with the alternatives, nobody needs to hack them and risk to start the nags, and M$ can't have a clue of cr**ks. Thanks Hazar and friends P.S. I was not my intention to advertising. Sorry
control panel is part of shell32.dll so that cant go anywhere unless you repalce the desktop. the apps are not really time bombs they check licensing status, and some other things and if things dont check out you get the nag. they may even tell sppsvc.exe to set the system as nongenuine.